Privacy Policy

INTERBUILD LTD is a controller of personal data and is responsible for compliance with the provisions of the General Data Protection Regulation 2016/679.

INTERBUILD LTD, hereinafter referred to as “Supplier”, “Administrator”, “we” or “us”, owner/operator of the website: https://oasis-bg.com/, hereinafter referred to as “Web page”, processes (including but not limited to collecting and storing) personal data, such as the users of the Website and the Provider’s services, hereinafter referred to as “User” or “You”, as well as the rights of the latter in this regard.

The purpose of this Privacy Policy is to inform you what personal data we collect from you or about you on this site or through our applications, through written or verbal communication with us or when you visit our property, for what purposes, to whom we provide them, what are your rights regarding the processing of your personal data and how you can exercise them.

By using any of our products and services and/or through agreeing with this Policy, for example, during registration for any of our products or services, you agree to the collection and use of personal data as described in this document.

PERSONAL DATA, COLLECTED BY US

In any instance of contact or interaction with the guests and in carrying out all aspects of our business, it is possible that we collect personal data. These may include:
– Your personal data (name and surname, telephone number and e-mail address) as well as other data that you provide us voluntarily for the purposes of processing your inquiries, providing service proposals, including communication with you in this regard;
– Information related to your reservation, stay or visit;
– Participation in a membership or loyalty program;
– Information related to the purchase and receipt of products or services;
– Personal characteristics, nationality, passport number and date and place of its issuance;
– Travel history;
– Payment information related to payment and selected payment methods for the purposes of issuing and sending accounting/tax documents (invoices) in connection with the services you use, including communication with you in this regard, as well as authentication information and other detailed data for invoicing and payment account related to mobile payments;
– Guest preferences;
– Communication and marketing preferences;
– Information about vehicles that you can bring into our property;
– Your IP address, browser settings and preferred language, pages visited as well as actions performed for the purpose of sending Push notifications, if you have expressed a desire to receive them;
– Your IP address, the pages visited, for the purposes of information security protection;
– Other data that may be necessary in certain cases or related to the provision of services to Users by us, including those necessary to fulfill obligations under a contract (for example, date of birth, signature, social security number) or other data that Users decide voluntarily to share with us also on the basis of performance of a contract to which you are a party, consent to processing provided by you or compliance with our legal obligation.

In specific instances we also collect other personal data, for example:

1. Participation in the Oasis Resort Lozenets Loyalty Program on the website: https://oasis-bg.com/

When you sign up for this program, you will be invited to enter with your email address, phone number, or Google profile, in order to be able to use all benefits of the program. Keep in mind that under these circumstances we will administer your personal data that we have not received personally by the data subject. Be informed that this data will only be used for the purposes of the tourist services provided by us in our capacity as a co-administrator of personal data.

2. Social networks

If you choose to participate in activities or offers on social networks sponsored by Oasis Resort Lozenets, we may receive some information from your social network account, in our capacity as co-administrator of personal data together with the social networks, depending on your settings in the respective social network, such as location, registrations, activities, interests, photos, status update and friends list. We may also provide you with the opportunity to participate in photo competitions, for example, related to photos taken during your stay with us which you can share with your social media contacts for voting, shared offers and other promotions. These photos are not processed by us as personal data and are not deemed personal data.

3. Event profiles

If you plan an event with us, we collect event details, event date, number of guests, guest room details and in case of corporate events – information about your organization. We also collect information about the guests who participate in your group or event.

4. Data collected in our property

We collect additional personal data when you register at our reception, including data requested under the Tourism Act.
We may also use a hidden surveillance and other security measures that may capture or record photos of guests and visitors in public areas, as well as location information about you during your stay at our complex (through access cards and other technologies).
We may use a video surveillance system and records of sound or video, in order to provide protection for our employees, guests and visitors when this is permitted by law. At the reception we record video and sound. The capture (observation) is carried out only with the aim to provide protection and security for our guests and is only carried out in the public spaces of the property. Be informed that the capture does not relate to the processing and collection of personal data and is not carried out with this aim and therefore the records are deleted within the term set in legislation.

In addition, we may also collect personal data in relation to services at our complex, such as: fitness, SPA center, events, babysitting, equipment rental, etc.

PURPOSES FOR COLLECTION, PROCESSING AND STORAGE OF PERSONAL DATA

We collect, process and store personal data of the Users in connection with the implementation of the services provided by us and communication in connection with the use of the Internet page, as well as for the following purposes:
– Communication and identification when performing a service contract (reservation is a contract);
– Communication, identification, processing and execution of inquiries made, requests made, reservations, purchases (including preparation for concluding a contract, solving problems related to cancellation of reservations, refund of paid amounts and others);
– Fulfillment of tax and other legal obligations;
– Accounting purposes in connection with the use of our services;
– Protection of our legitimate interests in connection with the fulfillment of our obligations to state and municipal bodies (for example: National Revenue Agency, Ministry of Internal Affairs);
– Protection of our legitimate interests in connection with the storage of information for the purpose of protection against legal or tax claims and for the purpose of improving the presentation of the Internet page;
– Protection of the information security of the Internet page;
– Statistical information about the use of the Internet page;
– To the extent permitted we may use your personal data to provide you with advertising content, promotions and current special offers, as well as other marketing communications depending on your preferences for receiving them.
We use your personal data to provide in-time communications, account notifications and booking confirmations. We may provide these communications via email, social media, telephone, text message (including SMS and Viber), push notifications, in-app messages and other means (including on-site messages, such as through your in-room television). With your consent we also use user-generated content (eg photos) from social networking services to serve visual advertisements on our website and in our applications, in case of co-administration with these third parties.

If a data subject refuses to provide us with some or all of the personal data that is necessary for the relevant purpose stated above, we may not be able to provide the relevant service (for example, to fulfill a contract entered into with the relevant User) or we fulfill the relevant legal requirements.

PERSONAL DATA THAT WE SHARE

In order to provide you the expected level of hospitality and the best service, we may share your personal data with our service providers and third parties as described below:

* Group Events and meetings: If you visit Oasis Resort Lozenets as part of a group event or meeting, the information collected during their planning, will be shared with the organizers of these meetings or events and when necessary with the guests of the same.

* Business partners: We may collaborate with other companies in order to provide you with products, services or offers based on your experience at our complex. In relation to this, we may share your data with our business partners. For example, we can help you to arrange a rental car or other services. In this case of such co-administration, in order to protect your personal data, we request from third parties to provide the same level of protection, as provided by Oasis Resort Lozenets.

* On-site services: We may share personal data with third-party providers who provide on-site services such as: beauty salon, SPA, tennis or restaurants. In this case of such co-administration, in order to protect your personal data, we request from third parties to provide the same level of protection, as provided by Oasis Resort Lozenets.

RULES FOR PERSONAL DATA PROCESSING

The Supplier provides the necessary levels of physical, organizational and technological protection in view of:
– The nature, scope, context and purpose of the processed personal data;
– The probability, levels of impact and severity of the risk for the rights and freedoms of the natural persons in case of breach of the security of the personal data processed;
– Its financial and organizational capabilities.

The Supplier also provides all necessary measures for the timely recovery of collected and processed personal data in the case of their loss as a result of accidental, malicious or force majeure events.

Personal data are processed with controlled and traceable access.

Personal data are processed with the required accountability to comply with the Regulation.

The Supplier ensures protection of the rights of the natural persons whose personal data are collected and processed, including:
– The right to awareness about the personal data processing;
– The right to access to personal data – what data are available;
– The right to correct inaccurate personal data;
– The right to erasure of personal data – the right to be forgotten;
– The right to restriction of the processed personal data;
– The right to awareness about actions as a result of a request for correction, erasure or restriction of the processing of personal data;
– Right to data portability;
– Right to object against processing of personal data;
– Right not to be an object of automated individual decision-making.

CHANGES AND ACCESS TO YOUR PERSONAL DATA

Within the framework of applicable legislation, you can ask about information regarding the personal data we store about you, to request its update, correction or deletion (“the right to be forgotten”) of your personal data which we maintain in our active database. We will perform all necessary updates and changes within the time-frame set out in applicable law and where it’s permitted by law. We may charge a certain fee to cover the costs related to the request. Such requests must be sent in written form to reservation@oasis-bg.com. In order to protect the confidentiality of your personal data, we can only reply to such requests through the email address you used when you register or provided to us by other means. Please remember that when you make such a request, it’s possible that we will not be able to provide you with the same quality and variety of services you are used to.

PERSONAL DATA STORAGE

The Supplier keeps personal data for the minimum required time, which is:
– required by law;
– necessary to perform the contract (including the order) and its responsibility under it;
– necessary to meet the purposes for which the data are collected and processed;
– upon request by a natural person for their erasure when there is reason for such a request.

Upon expiry of the minimum time required under items 1 to 4 of the preceding paragraph, personal data shall be destructed without undue delay.

In any case, the Supplier provides at least once a year to review the collected and processed personal data, and the ones that fall under any of the above hypotheses are erased without undue delay.

COMPETENT SUPERVISORY AUTHORITY

The competent supervisory body on the territory of the Republic of Bulgaria is the Commission for Personal Data Protection.

In case of doubt that your privacy rights have been violated, you can report to:

• Address: 2,Tsvetan Lazarov Blvd., Sofia 1592
  • Email: kzld@cpdp.bg
  • Web page: https://www.cpdp.bg/
  • Phone: 02 / 91-53-518